Clarification Text

NURTEKS CARPET INDUSTRY AND TRADE JOINT STOCK COMPANY, PERSONAL DATA PROTECTION NOTICE

As Nurteks Carpet Industry and Trade Joint Stock Company (Nurteks or the Company), we place great importance on and show high sensitivity to the protection of your personal data. With this awareness, we process all kinds of personal data belonging to all persons associated with Nurteks in compliance with the Law on the Protection of Personal Data No. 6698 (KVKK).

Nurteks, as the “Data Controller” defined under KVKK, processes your personal data for the purposes and methods explained below, within the limits stipulated by the legislation, with due care and diligence, and in accordance with destruction requirements and periods.

Definitions
Within the scope of this Personal Data Protection Notice:

Personal Data refers to any data relating to an identified or identifiable natural person (name, surname, ID number, address, phone number, system login/logout times, location, resumes, place of birth, date of birth, email address, image recordings and all similar data).

Special Categories of Personal Data refers to any data which, if learned, may cause discrimination or victimization, and which must be protected with stricter measures compared to other personal data (race, ethnic origin, political opinion, religious belief, sect, attire, union membership, health data, biometric data and all similar data).

Processing of Personal Data refers to any operation performed on personal data, whether by automated means or non-automated means provided it is part of a data recording system, including collection, recording, storage, alteration, sharing with third parties and transfer abroad.

KVKK refers to the Law on the Protection of Personal Data No. 6698, which was published in the Official Gazette on April 7, 2016 and entered into force.

Communiqué refers to the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, which was published in the Official Gazette on March 10, 2018 and entered into force.

Authority refers to the Personal Data Protection Authority.

Data Processor refers to the natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by the data controller.

Data Controller refers to the natural or legal person who determines the purposes and means of processing personal data, and is responsible for the establishment and management of the data recording system.

Data Subject refers to the natural person whose personal data is processed.

Contact Person refers to the person who provides communication with the Authority and ensures contact with Data Subjects.

Nurteks or the Company refers to Nurteks Carpet Industry and Trade Joint Stock Company.

Data Controller and Contact Person
Data Controller: Nurteks Carpet Industry and Trade JSC
Address: Yeşilköy Mahallesi, Atatürk Caddesi, EGS Business Park No:12 B2 Blok K:4 D:179-182 34149 Bakırköy / İstanbul
Contact Person: Serhan Yanılmaz

Collection, Method and Processing of Personal Data
Personal data of our customers, employees, employee candidates, company representatives, suppliers, business partners, employees of firms and institutions with which we cooperate or are in relation, visitors and other third parties may be collected and processed by our Company through automatic or non-automatic methods, in verbal, written or electronic form, via relevant departments of our Company, communication forms, phone calls, electronic applications, software, contracts, email, social media, cookies and similar means, within the framework of the Constitution of the Republic of Turkey, International Conventions to which our country is a party, Law No. 6698 on the Protection of Personal Data, and other relevant legislation.

For this reason, within the scope of KVKK, we would like to inform you regarding the Processing of Personal Data as a Data Controller. Pursuant to Article 4 of KVKK, your personal data will be processed lawfully and fairly, accurately and kept up to date when necessary, for specific, explicit and legitimate purposes, processed in connection with, limited to and proportionate to the purposes for which they are processed, and retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Purpose of Processing Personal Data
Your personal data collected will be processed within the scope of the conditions for processing personal data specified in Articles 5 and 6 of KVKK and the Communiqué, for purposes such as carrying out the activities of our Company through our business units, maintaining communication and relations with our customers, suppliers, business partners, employees of firms and institutions with which we cooperate or are in relation, visitors and other third parties, maintaining communication and relations with our employees, employee candidates, Company officials and managers, ensuring the continuation of collection, purchasing, accounting and financial affairs, ensuring physical security and control of Company premises, conducting evaluation, complaint management, legal compliance, internal audit, analysis and other processes of our Company, determining and implementing our commercial and business strategies, ensuring safe execution of our logistics activities, conducting legally compliant renewal, improvement, growth and investment activities, properly executing financial processes within our internal operations, properly executing human resources processes within our internal operations, ensuring proper continuation of office work life, ensuring compulsory and optional Information Technology operations of our Company, ensuring the legal and commercial security of our Company and the individuals and legal entities with whom our Company has business relations, maintaining our e-commerce operations conducted through our website in compliance with relevant legislation, and using cookies to collect information regarding website visits and usage.

Transfer of Your Personal Data
Your personal data may be transferred, within the purposes listed above, in compliance with KVKK and all relevant legislation, to our shareholders, senior management, business partners, suppliers, business connections, employees, auxiliaries, or third parties within or outside the country, in cases required by legislation or in connection with the subject and purpose of the Company’s activities, including regulatory and supervisory authorities and official institutions.

Storage and Deletion of Data
Our Company stores processed personal data for the periods specified in the relevant legislation, or in Company procedures and policies provided that it does not contradict applicable legislation. If no specific period is stipulated in the legislation, personal data is retained for as long as required for the services provided by our Company, based on our practices and commercial customs, and thereafter only for periods necessary for evidential purposes in potential legal disputes. After the expiration of these periods, the relevant personal data is deleted, destroyed, or anonymized by methods defined in Company procedures and policies.

Rights of Data Subjects
Within the scope of Article 11 of KVKK, you have the right to learn whether your personal data is processed, request information if your personal data has been processed, learn the purpose of processing and whether they are used in line with this purpose, know the third parties to whom your personal data is transferred domestically or abroad, request correction if your personal data is incomplete or incorrectly processed, request deletion or destruction of your personal data within the framework of conditions stipulated in KVKK and other legislation, request notification of the correction, deletion or destruction to third parties to whom your personal data has been transferred, object to the occurrence of a result against you by analyzing processed data exclusively through automated systems, and request compensation if you suffer damage due to unlawful processing of your personal data.

To exercise your rights, as a Data Subject, you may submit the relevant Application Form together with information and documents related to your request personally or by post or via Notary Public to the address “Yeşilköy Mahallesi, Atatürk Caddesi, EGS Business Park No:12 B2 Blok K:4 D:179-182 34149 Bakırköy / İstanbul”, or electronically via your registered email address by scanning the form and sending it to “info@nurteks.com.tr” from your registered email address with Nurteks, or to “nurtekshali@hs01.kep.tr”.

For your application, it is required that the subject of your request is clear and understandable, the subject requested relates to you, and if acting on behalf of someone else, you must provide documentation proving your special authorization in this regard. Identity and address information must be included, and documents verifying your identity must be attached.

Your application will be finalized free of charge as soon as possible and within 30 days at the latest from the date it reaches the Company, depending on the nature of the request. However, if the process incurs an additional cost, a fee may be charged according to the tariff determined by the Board. Your request will be accepted within this period or rejected with justification, and the response will be provided to you in writing or electronically. If the information and documents you provide are incomplete or unclear, you will be contacted to clarify your application.

As a data subject, if your application is rejected, not responded to in due time, or the response is found unsatisfactory, you may apply to the Authority within 30 days from the date you learn of our Company’s response, and in any case within 60 days from the date of your application.

Article 5 of KVKK regulates the “Cases Where Nurteks May Process Your Personal Data Without Your Explicit Consent” and Article 28 regulates the “Exemptions” from the application of the Law. In the event of any inconsistency between the applicable legislation and this Notice, the Data Controller accepts that the applicable legislation shall prevail.

This Personal Data Protection Notice entered into force on 19/05/2020 and is published on the website nurteks.com.tr. In the event of any updates to the entirety or specific articles of this Notice to comply with changing conditions and legislation, the effective date will also be updated and re-announced.

Nurteks Carpet Industry and Trade Joint Stock Company